Problem with PASV

Erik Espinoza erik.espinoza at gmail.com
Mon Jul 19 19:16:20 UTC 2004


On my firewall  only opened port 21 and loaded the ip_nat_ftp module. 

On Mon, 19 Jul 2004 20:30:06 +0200, J.L. Coenders
<fedora at universalgrid.nl> wrote:
> I found that out by googling, but I am not really a firewall hero.
> vsftpd allows settings the port range with:
> pasv_min_port=<port>
> pasv_max_port=<port>
> 
> However, I do not know what ports to choose for this yet and how to set it up
> in iptables.
> 
> - Jeroen
> 
> On Monday 19 July 2004 08:18 pm, Alexander Dalloz wrote:
> > Am Mo, den 19.07.2004 schrieb J.L. Coenders um 19:26:
> > > Ok, I read it... but what to open in iptables and vsftpd now?
> > > I can not open all ports above 1024 to allow passive mode.
> > > - Jeroen
> >
> > If you did read carefully the site given, then you know which ports have
> > to be open. If you won't open ports >1024 to remote > 1024 ports on the
> > server side, you will have to check whether vsftpd allows you to specify
> > the passive mode port range. I know proftpd is able to follow such an
> > instruction. Maybe you will have to change the ftpd then.
> >
> > Alexander
> 
> -- 
> fedora-list mailing list
> fedora-list at redhat.com
> To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list
>





More information about the fedora-list mailing list